Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
225301	6.5	警告	IBM	-	IBM SmartCloud Control Desk におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-3321	2013-02-21 18:21	2012-02-15	Show	GitHub Exploit DB Packet Storm

225302	3.5	注意	IBM	-	複数の IBM 製品の TPAE におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-3316	2013-02-21 18:20	2012-02-15	Show	GitHub Exploit DB Packet Storm

225303	7.5	危険	IBM	-	IBM SAN Volume Controller および Storwize の管理 GUI における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2012-6354	2013-02-21 18:20	2013-02-5	Show	GitHub Exploit DB Packet Storm

225304	5	警告	シスコシステムズ	-	Cisco Unity Connection におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2013-1129	2013-02-21 16:41	2013-02-15	Show	GitHub Exploit DB Packet Storm

225305	6.8	警告	シスコシステムズ	-	複数の Cisco 製品のコマンドラインインターフェイスにおける root 権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2013-1125	2013-02-21 16:40	2013-02-15	Show	GitHub Exploit DB Packet Storm

225306	2.6	注意	コンクリートファイブ	-	concrete5 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5181	2013-02-20 16:01	2012-12-21	Show	GitHub Exploit DB Packet Storm

225307	7.2	危険	マイクロソフト	-	Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-0008	2013-02-20 14:31	2013-01-8	Show	GitHub Exploit DB Packet Storm

225308	7.5	危険	Google	-	Linux 上で稼働する Google Chrome における脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-0838	2013-02-20 13:41	2013-01-10	Show	GitHub Exploit DB Packet Storm

225309	7.5	危険	Google	-	Google Chrome におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2013-0837	2013-02-20 13:40	2013-01-10	Show	GitHub Exploit DB Packet Storm

225310	6.8	警告	Google	-	Google Chrome で使用される Google V8 におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2013-0836	2013-02-20 13:39	2013-01-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
315511	6.1	MEDIUM Network	calibre-ebook	calibre	Unsanitized user-input in Calibre <= 7.15.0 allow attackers to perform reflected cross-site scripting.	CWE-79 Cross-site Scripting	CVE-2024-7008	2024-08-20 02:19	2024-08-6	Show	GitHub Exploit DB Packet Storm

315512	7.1	HIGH Network	calibre-ebook	calibre	Unsanitized user-input in Calibre <= 7.15.0 allow users with permissions to perform full-text searches to achieve SQL injection on the SQLite database.	CWE-89 SQL Injection	CVE-2024-7009	2024-08-20 02:18	2024-08-6	Show	GitHub Exploit DB Packet Storm

315513	7.5	HIGH Network	calibre-ebook	calibre	Path traversal in Calibre <= 7.14.0 allow unauthenticated attackers to achieve arbitrary file read.	CWE-22 Path Traversal	CVE-2024-6781	2024-08-20 02:15	2024-08-6	Show	GitHub Exploit DB Packet Storm

315514	7.5	HIGH Network	dell	alienware_update update command_update	Dell Command \| Update, Dell Update, and Alienware Update UWP, versions prior to 5.4, contain an Exposed Dangerous Method or Function vulnerability. An unauthenticated attacker with remote access coul…	CWE-610 Externally Controlled Reference to a Resource in Another Sphere	CVE-2024-28962	2024-08-20 02:12	2024-08-6	Show	GitHub Exploit DB Packet Storm

315515	9.8	CRITICAL Network	itsourcecode	laravel_accounting_system	A vulnerability, which was classified as critical, was found in itsourcecode Laravel Accounting System 1.0. This affects an unknown part of the file app/Http/Controllers/HomeController.php. The manip…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2024-7495	2024-08-20 02:10	2024-08-6	Show	GitHub Exploit DB Packet Storm

315516	9.8	CRITICAL Network	angeljudesuarez	airline_reservation_system	A vulnerability was found in itsourcecode Airline Reservation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file flights.php. The man…	CWE-89 SQL Injection	CVE-2024-7499	2024-08-20 01:51	2024-08-6	Show	GitHub Exploit DB Packet Storm

315517	7.5	HIGH Network	oretnom23	simple_online_bidding_system	A vulnerability classified as critical has been found in SourceCodester Simple Online Bidding System 1.0. This affects an unknown part of the file /simple-online-bidding-system/bidding/admin/ajax.php…	CWE-89 SQL Injection	CVE-2024-7800	2024-08-20 01:50	2024-08-15	Show	GitHub Exploit DB Packet Storm

315518	9.8	CRITICAL Network	angeljudesuarez	airline_reservation_system	A vulnerability was found in itsourcecode Airline Reservation System 1.0. It has been classified as critical. Affected is the function login/login2 of the file /admin/login.php of the component Admin…	CWE-89 SQL Injection	CVE-2024-7498	2024-08-20 01:50	2024-08-6	Show	GitHub Exploit DB Packet Storm

315519	8.8	HIGH Network	angeljudesuarez	airline_reservation_system	A vulnerability was found in itsourcecode Airline Reservation System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/index.php. The manipulation of the a…	NVD-CWE-Other	CVE-2024-7497	2024-08-20 01:49	2024-08-6	Show	GitHub Exploit DB Packet Storm

315520	8.8	HIGH Network	angeljudesuarez	airline_reservation_system	A vulnerability has been found in itsourcecode Airline Reservation System 1.0 and classified as critical. This vulnerability affects unknown code of the file /index.php. The manipulation of the argum…	NVD-CWE-Other	CVE-2024-7496	2024-08-20 01:48	2024-08-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed